Analysis
-
max time kernel
141s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19-08-2024 07:33
Static task
static1
Behavioral task
behavioral1
Sample
aa222fc4b5adde09d4d792e1e0d63c49_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa222fc4b5adde09d4d792e1e0d63c49_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa222fc4b5adde09d4d792e1e0d63c49_JaffaCakes118.exe
-
Size
770KB
-
MD5
aa222fc4b5adde09d4d792e1e0d63c49
-
SHA1
cc8605c5e853975ccf1dc24703bbdbab8effd9d0
-
SHA256
9ba1bbb88d5a7832ee6789a60f94573028123484f6986bea945d7e74c46ea2f2
-
SHA512
40c624170b1fcabeced3d5a6f83227cddbd3cde937e025ff07cfa2056a3f7b4a16c7a5495180a4fef7084deb0fd808f46e8f85c53f577dc594aa3bcca0e6a62e
-
SSDEEP
12288:Q0nyfXuIBDtfu0AM2B9PgZw+jCh+4KMS+Sp7JEjw+IHLoYghJnfk45Q:Nny/f9u0n24ltMjw+OLonhJnJQ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language aa222fc4b5adde09d4d792e1e0d63c49_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4988 aa222fc4b5adde09d4d792e1e0d63c49_JaffaCakes118.exe 4988 aa222fc4b5adde09d4d792e1e0d63c49_JaffaCakes118.exe